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IN THE TITLE: 

Above the Title, please add: 

TITLE OF THE INVENTION 

IN THE SPECIFICATION : 

On page 1 of the Specification, after the Title, please add: 

CROSS-REFERENCE TO RELATED APPLICATION 
This application claims priority from Austrian Patent Application A 51 1/200L filed 30 
March 2001. and PCT Patent Application Serial No, AT02/00094, filed 27 March 2002. 

FIELD OF THE INVENTION 

On page 1, please delete the first paragraph and insert therefore: 

The invention relates to a method for operation of a distributed computer system comprising 
network nodes, each of which has at least one node controller and one communication 
controller, wherein the communication controllers are connected to each other via at least one 
communication channel, provision is made between the communication controller and the node 
controller of a network node for a fault tolerance layer, which is set up to receive messages that 
are exchanged between the network nodes, and the fault tolerance layer decides, based on 
information received pertaining to the status of at least one network node, about the 
functioning of the at least one network node via a coordination procedure. 
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On page 1, after the first paragraph, please add: 

BACKGROUND OF THE INVENTION 

On page 4, please delete the last four (4) paragraphs and insert therefor: 
One such method has become known from the document "Dependable Systems and Networks 
(DSN 200)", New York, IEEE Press, p. 5. In this method the transmission of the output signals 
is carried out via the bus, and the receiver nodes are then indirectly controlled, specifically by 
arrangement of independent measures of the receiver nodes so that a fault-tolerant direct 
transmission of trigger signals between the nodes is not possible. The document of Kopetz, H. 
et al., "Tolerating Arbitrary Node Failures in the Time-Triggered Architecture", white paper, 
March 2001, describes the fault tolerance and the possibilities of fault processing in an 
architecture that used the TTP/C protocol, for example also a ^synchronization mechanism in 
the case of multiple faults. A direct fault-tolerant control of network nodes is likewise not 
described in this document. 

The object of the present invention is to overcome the cited disadvantages of the prior art. 

This objective is achieved using a method of the kind mentioned at the outset in that the 
coordination result is made available as an output signal to one or more hardware outputs of 
the communication controller and the at least one network node is controlled as a function of 
this output signal. 

Owing to the invention, other network nodes can force a faulty application or processing unit 
into a specific behavior corresponding to the security design, and, thus, specific fault scenarios 
of the overall system can be triggered in a controlled manner. Trigger signals for direct 
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triggering of the actuators can be transmitted in a time-triggered architecture taking into 
account the application-specific security claims, whereby, for example, a node identified as 
faulty can be switched off by other nodes. Through the coordination mechanism in the fault 
tolerance layer, a faulty network node can thus be prevented from having an effect on other 
nodes in the system. In this way it can be ensured that no individual failures lead to a failure of 
the overall system. 

On page 5, before the first paragraph, please add: 

BRIEF SUMMARY OF THE INVENTION 

On page 6, before the first paragraph, please add: 

BRIEF DESCRIPTION OF THE DRAWINGS 

On page 6, after the fourth paragraph, please add: 

DETAILED DESCRIPTION OF THE INVENTION 
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